encrypt the data and store in db

Alright here is an example which we've used to encrypt a String realted using MD5 data hope this might be of some help.

import java.io.UnsupportedEncodingException;

import java.security.MessageDigest;

import java.security.NoSuchAlgorithmException;

import sun.misc.BASE64Encoder;

public final class EncryptService{

private static EncryptService Obj;

public synchronized String encrypt(String plaintext) throws Exception {

MessageDigest md = null;

try{

md = MessageDigest.getInstance("SHA");

} catch(NoSuchAlgorithmException e){

throw new Exception(e.getMessage());

}

try{

md.update(plaintext.getBytes("UTF-8"));

} catch(UnsupportedEncodingException e){

throw new Exception(e.getMessage());

}

byte raw[] = md.digest();

String hash = new BASE64Encoder().encode(raw);

return hash;

}

public static synchronized EncryptService getInstance(){

if(instance == null){

instance = new EncryptService();

}

return instance;

}

}

This is generally used for Password/Security word Encryption in most of the Real World Applications.

REGARDS,

RaHuL

RahulSharnaa at 2007-7-10 2:24:20 >

Use sun.misc.BASE64Encoder and sun.misc.BASE64Decoder.

String string = "test";

String encoded = new BASE64Encoder().encode(string.getBytes());

String decoded = new String(new BASE64Decoder().decodeBuffer(encoded)); // throws IOException

By the way, RahulSharna, MD5 is not the same as SH5. And why are you putting it in a (over)synchronized context in a singleton? There are only threadlocal vars and hashing is simply an one-way calculation. You can even safely declare it static.

Check here for a MD5 hasher: http://balusc.xs4all.nl/srv/dev-jep-use.html#GenerateMD5Hash

BalusCa at 2007-7-10 2:24:20 >

Indeed, hashing is form of one-way encryption.

And also keep in mind that there is a difference between encrypying/decrypting and encoding/decoding. Encrypted values which are encrypted using a key are intented to be hard-to-hack (however, currently 3DES seems to be hackable). Encoded values are easy-to-hack by just decoding (translating) them back.

For passwords, please use hashes. Hash them by MD5 (or any kind of one-way encryption) and save the value in DB. During login, hash the entered password and compare it with the value in DB.

BalusCa at 2007-7-10 2:24:20 >